MoinMoin CVE-2012-6081 Multiple Arbitrary Code Execution Vulnerabilities

Bugtraq ID:	57082
Class:	Design Error
CVE:	CVE-2012-6081
Remote:	Yes
Local:	No
Published:	Dec 29 2012 12:00AM
Updated:	Apr 13 2015 10:12PM
Credit:	The vendor reported these issues
Vulnerable:	MoinMoin MoinMoin 1.9.5 MoinMoin MoinMoin 1.9.4 MoinMoin MoinMoin 1.9.3 MoinMoin MoinMoin 1.9.2 MoinMoin MoinMoin 1.9.1 MoinMoin MoinMoin 1.9 Gentoo Linux Debian Linux 6.0.5 Debian Linux 6.0 s/390
Not Vulnerable:	MoinMoin MoinMoin 1.9.6

MoinMoin CVE-2012-6081 Multiple Arbitrary Code Execution Vulnerabilities

MoinMoin is prone to multiple arbitrary code-execution vulnerabilities that lets remote attackers execute arbitrary code.

Successful exploits will allow attackers to execute arbitrary code within the context of the affected application.

MoinMoin versions 1.9.0 through 1.9.5 are vulnerable.

MoinMoin CVE-2012-6081 Multiple Arbitrary Code Execution Vulnerabilities

The following exploits are available:

• /data/vulnerabilities/exploits/57082.py
• /data/vulnerabilities/exploits/57082.rb

MoinMoin CVE-2012-6081 Multiple Arbitrary Code Execution Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

MoinMoin CVE-2012-6081 Multiple Arbitrary Code Execution Vulnerabilities

References:

• MoinMoin Homepage (MoinMoin)
  
• Security Fix Announcements (MoinMoin)
  
• moin/1.9 / changeset (MoinMoin)